Controller Hot and Cold Standby Redundancy Protocol

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing fault-tolerant control systems require multiple redundant controllers to handle multiple failures, leading to inefficient resource consumption and high costs, as they need to replicate functions across multiple controllers to ensure continuous operation.

Innovation Solution

A control system design that designates one controller as primary, another in hot standby, and a third in cold standby, allowing only two controllers to execute functions simultaneously, with the backup controller in cold standby mode not switching directly to primary status, reducing processing load and resource burden.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple redundant controllers are used to handle multiple failures, then system reliability is improved, but resource consumption and system cost increase

Engineering Contradiction:

Improvefault toleranceVSAvoidnumber of controllers

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent implements dynamic role assignment where controllers can switch between primary, hot standby, and cold standby roles based on system state and failure conditions. This dynamic configuration allows the system to maintain high reliability while reducing the number of controllers needed compared to static redundant architectures.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent segments the standby functionality into two distinct levels: hot standby (immediate takeover capability) and cold standby (resource-efficient backup). This segmentation allows the system to optimize resource allocation by not maintaining full operational redundancy for all backup controllers, thereby reducing the total number of controllers required.

Inventive Principle:

Principle #1Segmentation

2Reliability

If multiple controllers execute functions simultaneously, then fault tolerance is improved, but processing load and resource consumption increase

Engineering Contradiction:

Improvefault toleranceVSAvoidprocessing load

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent applies partial action by having only the primary controller execute control functions during normal operation, while hot and cold standby controllers remain in monitoring or reduced-execution modes. This eliminates the need for all controllers to run at full processing capacity simultaneously, significantly reducing overall processing load and energy consumption.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The hot standby controller performs preliminary synchronization with the primary controller, maintaining readiness to take over without requiring full independent execution. This preliminary action ensures immediate fault response while minimizing the processing burden on standby controllers during normal operation.

Inventive Principle:

Principle #10Preliminary action

3Speed

If cold standby controller switches directly to primary status, then takeover speed is improved, but system stability and reliability decrease

Engineering Contradiction:

Improvetakeover speedVSAvoidsystem stability

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The patent implements a two-stage transition process where the cold standby controller first promotes the hot standby to primary status, then transitions to hot standby itself. This preliminary action ensures that the system always maintains a properly synchronized hot standby before allowing another controller to take over, preserving system stability while enabling fast recovery.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent cushions against potential failures by requiring the hot standby (which is already synchronized and ready) to take over before the cold standby becomes primary. This intermediate cushioning step prevents direct transitions that could skip necessary synchronization checks, thereby maintaining system reliability during fast failover.

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS9952948B2Fault-tolerance pattern and switching protocol for multiple hot and cold standby redundancies

Publication Date: 2018.04.24 GM GLOBAL TECHNOLOGY OPERATIONS LLC

AI summary

A method for fault tolerant controller readiness. Executing functions by a first controller operating in a primary status mode. Operating in a hot standby status mode by a second controller and mirroring the first controller by executing functions to operate as a redundant controller. Operating in a cold standby status mode by at least one backup controller under normal operating conditions. The second controller is reconfigured while operating under normal operating conditions from the hot standby status mode to the primary standby status mode if a failure occurs in the first controller. Reconfiguring the at least one backup controller operating under normal operating conditions from cold standby status mode to hot standby status mode to operate as a redundant controller in response to the reconfiguring the second controller from the hot standby status mode to the primary status mode.